Skip to content
OpenAdvisories

Package · Hex

decimal

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.9
    CVE-2026-97853

    Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS

    Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is applied, so its cost…

    ericmj decimal decimal Hex
  • Medium 6.9
    CVE-2026-32686

    Unbounded exponent in decimal enables unauthenticated DoS

    Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The decimal library does not bound the exponent on parsed input. Storing a decimal with a very large exponent (e.g. Decimal.new("1e1000000000"))…

    ericmj decimal decimal Hex